Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/cN0AOfW0gs3N5mkI2N8KVJyZZgw.roa
File: cN0AOfW0gs3N5mkI2N8KVJyZZgw.roa (raw, json)
Hash identifier: XK0Sltoih9LY2U06aPQIBGFPiy8a7E651zHFYdxexFM=
Subject key identifier: 70:DD:00:39:F5:B4:82:CD:CD:E6:69:08:D8:DF:0A:54:9C:99:66:0C
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 0183FA254D1CCBCBCC8136A9680D324E0E58
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/cN0AOfW0gs3N5mkI2N8KVJyZZgw.roa
Signing time: Fri 21 Oct 2022 10:44:52 +0000
ROA not before: Fri 21 Oct 2022 10:44:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20911
IP address blocks: 178.254.246.0/24 maxlen: 24
178.254.245.0/24 maxlen: 24
178.254.244.0/24 maxlen: 24
178.254.243.0/24 maxlen: 24
178.254.242.0/24 maxlen: 24
178.254.241.0/24 maxlen: 24
178.254.240.0/20 maxlen: 20
178.254.248.0/24 maxlen: 24
178.254.247.0/24 maxlen: 24
178.254.253.0/24 maxlen: 24
178.254.252.0/24 maxlen: 24
178.254.251.0/24 maxlen: 24
178.254.250.0/24 maxlen: 24
178.254.249.0/24 maxlen: 24
178.254.255.0/24 maxlen: 24
178.254.254.0/24 maxlen: 24
178.254.192.0/24 maxlen: 24
178.254.199.0/24 maxlen: 24
178.254.198.0/23 maxlen: 23
178.254.198.0/24 maxlen: 24
178.254.197.0/24 maxlen: 24
178.254.193.0/24 maxlen: 24
178.254.200.0/24 maxlen: 24
178.254.206.0/23 maxlen: 23
178.254.206.0/24 maxlen: 24
178.254.205.0/24 maxlen: 24
178.254.204.0/22 maxlen: 22
178.254.204.0/24 maxlen: 24
178.254.203.0/24 maxlen: 24
178.254.202.0/24 maxlen: 24
178.254.201.0/24 maxlen: 24
178.254.200.0/23 maxlen: 23
178.254.212.0/23 maxlen: 23
178.254.213.0/24 maxlen: 24
178.254.212.0/24 maxlen: 24
178.254.211.0/24 maxlen: 24
178.254.210.0/24 maxlen: 24
178.254.209.0/24 maxlen: 24
178.254.208.0/24 maxlen: 24
178.254.208.0/22 maxlen: 22
178.254.207.0/24 maxlen: 24
178.254.219.0/24 maxlen: 24
178.254.218.0/24 maxlen: 24
178.254.217.0/24 maxlen: 24
178.254.216.0/24 maxlen: 24
178.254.216.0/21 maxlen: 21
178.254.215.0/24 maxlen: 24
178.254.214.0/24 maxlen: 24
178.254.226.0/24 maxlen: 24
178.254.225.0/24 maxlen: 24
178.254.224.0/23 maxlen: 23
178.254.224.0/24 maxlen: 24
178.254.223.0/24 maxlen: 24
178.254.222.0/24 maxlen: 24
178.254.221.0/24 maxlen: 24
178.254.220.0/24 maxlen: 24
178.254.228.0/24 maxlen: 24
178.254.233.0/24 maxlen: 24
178.254.232.0/24 maxlen: 24
178.254.232.0/21 maxlen: 21
178.254.231.0/24 maxlen: 24
178.254.230.0/24 maxlen: 24
178.254.229.0/24 maxlen: 24
178.254.228.0/22 maxlen: 22
178.254.227.0/24 maxlen: 24
178.254.240.0/24 maxlen: 24
178.254.239.0/24 maxlen: 24
178.254.238.0/24 maxlen: 24
178.254.237.0/24 maxlen: 24
178.254.236.0/24 maxlen: 24
178.254.235.0/24 maxlen: 24
178.254.234.0/24 maxlen: 24
93.152.229.0/24 maxlen: 24
93.152.228.0/24 maxlen: 24
93.152.228.0/23 maxlen: 23
93.152.253.0/24 maxlen: 24
93.152.252.0/23 maxlen: 23
93.152.252.0/24 maxlen: 24
93.152.251.0/24 maxlen: 24
93.152.250.0/24 maxlen: 24
93.152.249.0/24 maxlen: 24
93.152.248.0/24 maxlen: 24
93.152.248.0/22 maxlen: 22
93.152.255.0/24 maxlen: 24
93.152.254.0/24 maxlen: 24
93.152.254.0/23 maxlen: 23
46.229.207.128/25 maxlen: 25
46.229.206.128/25 maxlen: 25
185.95.251.0/24 maxlen: 24
185.95.250.0/24 maxlen: 24
185.95.249.0/24 maxlen: 24
185.95.248.0/24 maxlen: 24
46.229.192.0/24 maxlen: 24
46.229.192.0/23 maxlen: 23
46.229.192.0/20 maxlen: 20
46.229.194.0/24 maxlen: 24
46.229.193.0/24 maxlen: 24
46.229.199.0/24 maxlen: 24
46.229.198.0/24 maxlen: 24
46.229.197.0/24 maxlen: 24
46.229.196.0/24 maxlen: 24
46.229.196.0/22 maxlen: 22
46.229.195.0/24 maxlen: 24
46.229.205.0/24 maxlen: 24
46.229.204.0/24 maxlen: 24
46.229.203.0/24 maxlen: 24
46.229.202.0/24 maxlen: 24
46.229.201.0/24 maxlen: 24
46.229.200.0/22 maxlen: 22
46.229.200.0/24 maxlen: 24
46.229.207.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fa:25:4d:1c:cb:cb:cc:81:36:a9:68:0d:32:4e:0e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Oct 21 10:44:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70dd0039f5b482cdcde66908d8df0a549c99660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:df:e0:60:10:3f:45:b8:14:f4:cc:69:24:
b4:61:03:66:9c:8d:3e:e4:c4:75:18:17:2f:6b:f2:
ad:57:04:9b:ae:ee:ed:8c:e0:bc:4e:8a:ad:4e:0b:
eb:bb:6d:37:b8:b3:eb:37:47:20:ce:f9:c7:f3:e6:
6c:d4:ee:dd:1b:61:bc:5d:e3:67:0e:ec:b8:a4:72:
1d:27:63:d5:f3:71:ea:55:f4:6e:e8:1f:d4:8f:1c:
ea:89:63:d2:25:78:a8:5f:21:ca:9f:fb:ee:f6:26:
74:97:19:27:fa:72:21:7a:cd:6d:d3:94:25:75:e8:
af:e9:2c:4f:9e:91:33:75:ac:b4:8e:56:5f:29:c7:
bf:2a:d8:38:09:4e:d4:66:a3:38:b1:7e:82:26:97:
4d:03:f2:8d:03:2f:42:2f:d7:97:53:55:46:6d:c1:
c9:d5:80:99:a5:aa:99:22:13:a4:99:01:37:99:e0:
93:7b:8f:cd:8d:72:0d:bd:6e:56:c1:6b:44:d0:0d:
d9:93:dc:dd:d9:99:5b:ce:25:44:a8:a3:ef:a0:1f:
79:3d:63:c6:2d:bc:94:7b:64:8c:35:44:89:c8:2f:
8e:47:c0:20:bd:58:c5:d2:83:9b:88:b9:aa:64:ba:
ad:7a:49:1d:3c:7d:76:b4:ca:47:e9:4e:e3:a0:90:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:DD:00:39:F5:B4:82:CD:CD:E6:69:08:D8:DF:0A:54:9C:99:66:0C
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/cN0AOfW0gs3N5mkI2N8KVJyZZgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.192.0/20
93.152.228.0/23
93.152.248.0/21
178.254.192.0/23
178.254.197.0-178.254.255.255
185.95.248.0/22
Signature Algorithm: sha256WithRSAEncryption
75:99:85:c9:c1:2d:dd:b6:e6:c7:49:5e:e9:f4:13:78:61:86:
88:cb:c6:3a:76:51:e8:53:36:59:5a:5b:67:19:35:a2:46:30:
64:8e:e4:39:9c:0d:d4:56:74:0f:ca:0d:04:27:60:ce:ab:3e:
30:36:f4:94:b0:3c:f7:56:d8:6c:35:17:32:4d:31:a7:ac:5c:
bc:c3:07:11:99:82:ca:d3:fc:56:ce:a6:c8:3f:89:75:88:03:
42:1e:4e:81:d4:00:7f:d0:a0:2a:b6:b9:28:e3:c4:df:84:34:
23:06:61:f1:fc:f6:f9:d3:21:11:65:58:b1:e2:c4:14:31:a6:
a1:6d:1d:e6:0b:a0:e8:f0:35:ae:d9:f8:ad:ad:e3:4c:da:a7:
ad:b8:6d:78:7d:82:11:a8:fb:b0:bd:25:e3:d5:3c:28:7e:fe:
c3:5d:48:86:7d:84:cc:42:2d:08:66:3a:c4:43:9a:ad:c4:33:
a5:30:bd:3b:35:ae:51:8e:c7:3f:6f:1b:25:6d:84:4e:99:f9:
61:76:42:6d:41:63:0b:5e:a6:eb:ce:66:ec:bf:f7:63:0a:26:
e7:cb:ad:d7:ae:7f:b8:68:be:9f:f4:ae:05:cf:43:e9:7a:96:
69:49:86:a9:4c:f4:ea:77:9e:f5:e1:08:3a:35:a5:1b:b0:91:
2d:91:31:9f
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAYP6JU0cy8vMgTapaA0yTg5YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmZhNzcyYWFjMjEwN2M5MGNmMjhiMjJiOGQyYWQwNzk3
ZjgzMmQwHhcNMjIxMDIxMTA0NDUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGRkMDAzOWY1YjQ4MmNkY2RlNjY5MDhkOGRmMGE1NDljOTk2NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T3f4GAQP0W4FPTMaSS0YQNmnI0+
5MR1GBcva/KtVwSbru7tjOC8ToqtTgvru203uLPrN0cgzvnH8+Zs1O7dG2G8XeNn
Duy4pHIdJ2PV83HqVfRu6B/UjxzqiWPSJXioXyHKn/vu9iZ0lxkn+nIhes1t05Ql
deiv6SxPnpEzday0jlZfKce/Ktg4CU7UZqM4sX6CJpdNA/KNAy9CL9eXU1VGbcHJ
1YCZpaqZIhOkmQE3meCTe4/NjXINvW5WwWtE0A3Zk9zd2ZlbziVEqKPvoB95PWPG
LbyUe2SMNUSJyC+OR8AgvVjF0oObiLmqZLqtekkdPH12tMpH6U7joJCoIwIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFHDdADn1tILNzeZpCNjfClScmWYMMB8GA1UdIwQY
MBaAFJu/p3KqwhB8kM8osiuNKtB5f4MtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81NTJjOTQtN2M5OS00Y2RkLTg5MmEt
ZWU5ODI5ZGRhOGJjLzEvY04wQU9mVzBnczNONW1rSTJOOEtWSnlaWmd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81NTJjOTQtN2M5OS00Y2RkLTg5MmEtZWU5ODI5ZGRhOGJj
LzEvbTctbmNxckNFSHlRenlpeUs0MHEwSGxfZ3kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAxBAIAATArAwQELuXAAwQB
XZjkAwQDXZj4AwQBsv7AMAsDBACy/sUDAwCy/gMEArlf+DANBgkqhkiG9w0BAQsF
AAOCAQEAdZmFycEt3bbmx0le6fQTeGGGiMvGOnZR6FM2WVpbZxk1okYwZI7kOZwN
1FZ0D8oNBCdgzqs+MDb0lLA891bYbDUXMk0xp6xcvMMHEZmCytP8Vs6myD+JdYgD
Qh5OgdQAf9CgKra5KOPE34Q0IwZh8fz2+dMhEWVYseLEFDGmoW0d5gug6PA1rtn4
ra3jTNqnrbhteH2CEaj7sL0l49U8KH7+w11Ihn2EzEItCGY6xEOarcQzpTC9OzWu
UY7HP28bJW2ETpn5YXZCbUFjC16m685m7L/3Ywom58ut165/uGi+n/SuBc9D6XqW
aUmGqUz06nee9eEIOjWlG7CRLZExnw==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:26 2023 by rpki-client on console.sobornost.net